bird-house / bird-house/twitcher
Consider replacing lxml by defusedxml
Open
security
- Dominant language
- Python
- Stars
- 15
- Forks
- 5
- Avg merge
- 4d 14h
- Merged PRs (30d)
- 4
Description
Resolves multiple attack methods through XML:
https://pypi.org/project/defusedxml/#python-xml-libraries
Replacement seems relatively straighforward
https://pypi.org/project/defusedxml/#defusedxml
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reviewing the defusedxml documentation linked in the issue, especially its guidance for replacing Python XML libraries. Then locate the project's lxml usage and determine the affected paths and tests. Done means the vulnerable XML handling is replaced without breaking existing behavior and the relevant tests pass.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100